skysight-inc/HackerNews huggingface dataset:
Oooh, so they actually throw a number down (32TB), nice to know. (Others just say "unlimited" everywhere and let you figure it out, yay.)

In amusing timing, I was literally just looking at the homepage and specs sections myself - my 2CPU/6GB/500GB/€6.99 plan is kind of getting a bit old, although I do admittedly have 100GB more storage, hmm.

My thinking is that Contabo is located in areas where the peering and power are reasonably inexpensive. Also, based on the tour photos and webcam views they publish, they're using tons and tons of desktop-form-factor systems they presumably assemble and maintain in-house, as opposed to ordering more traditional rack systems (with $$$$ server boards/proprietary SKUs inside). For a small-to-mid-scale operation, it would appear this offers better value for money (ironically), including compute/heat density considerations etc.

As for the price disparities... the sad thing I think is happening is that, by pricing themselves into the corner of the market (which they're basically dominating), customer perception may be "oh they're the cheap/low end", which... they are and they aren't. They offer dedicated (whole machine) for €150+/mo and semi-dedicated (CPU+RAM reservation, not sure about storage IOPS reservation though!) for €35+/mo, but these are fairly new offerings and I wonder if Contabo is trying to balance out customer perception about where they sit in the market. (As an aside, I kind of take those prices as vague hints about how much oversubscribing is (cough) technically going on with the low end offerings... ahem.)

An environment like Vultr seems to hold a position similar to eg DigitalOcean et al, where customers have learned to expect "it costs this much" and just accept the pricing. Sigh.

I guess the only way to really know is to actually order a VM, generate an eye-watering amount of traffic (which might be a project in and of itself), and see what happens.

As for 10TB of storage, that's a tricky one.

Naturally the first thing that comes to mind is Amazon :) which reveals that this size hovers around the US$260-$300 mark. Get two, mirror them with ZFS, add a small UPS, and you're done for a steep but once-off total cost of around US$1000.

Second to that is the Hetzner Server Auction, which allows users to bid for rental of currently-unused custom configurations. Filtering for >9TB, https://www.hetzner.com/sb?hdd_from=9000, currently returns a box with a Xeon-E3, 32GB ECC :) RAM, and 4x10TB (yes) HDD, for €82/mo. (With "unlimited" traffic ("yay"), apparently at 1Gbit.)

Second option: much more accessible, both in terms of price and "other people using it" :)

First option: would be paid-out after one year of Hetzner rental (1000/82=~12).
Wikipedia at least suggests that the bankruptcy was unrelated. I'm not gonna spend the time to find out tho.
That's an interesting question, which is similar to the broken window fallacy : https://www.investopedia.com/ask/answers/08/broken-window-fa...

To make it short : Money and time lost due this lack of trust could be allocated to more valuable endeavor, such as pretty much anything.

Therefore it is better for society to solve this issue, even if it means some specific people that were making money out of it beforehand will not be able to anymore.
I think you're missing the point. Ryanair have only flown the 737 Type Rating since their inception, not solely the 737-8200s they have on order.

The only non-737 Type Rated aircraft in the corporate fleet are the A320-200s that came with the aquisition of Lauda Air, which are set to be replaced by 737-8200s.

The A320neo was never a viable option for Ryanair.
I have a similar background, elec-mech undergrad, masters in robotics doing SLAM, spent time doing electrical design for industrial usage, then software doing computer vision, now working on drone autopilots.

I 100% agree on needing to design and regulate the design of safety critical CV (and particularly ML based CV) algorithms so that, if nothing else, the failure mechanisms are quantifiable and limited in their impact.
Ask HN: Is there a changelog equivalent for the U.S. government?
Been using this for years this is the only way I can browse HN and not miss anything. Great work
It is probably a non-issue but one downside is that if people realize that you are doing this they can just pick a new "user" and reach you even if you have blocked their original address.

It would be interesting to do something like this with signatures. You could generate new addresses "on the fly" by picking a prefix and signing it. Then you can use this email and it can't be modified in a way to generate a new valid email.

For example you could have walmart-oaiua83n@yourdomain.example and they couldn't just change it to goodcompany@example.com.
Ask HN: What to Read on Decentralised Networking?
Hey guys,

So I am trying to structure my knowledge on decentralised networking. Historical development, protocols, latest trends. I am interested in more theoretical grounds behind the advances in this field. What comes to my mind are the innovations that BitTorrent, Tor, Blockchain, IPFS, and the likes brought in the last 20 years.

What are some papers that you know/read on this topic? Maybe there is a nice collection in the form of "* Papers We Love" (couldn't find one)?

Also, what books do you recommend to study?

Thank you,

and have a nice day! ^_^v!

PS: I started digging with the paper

"On Distributed Communications

I. Introduction to Distributed Communications Networks"

by Paul Baran
Perhaps a more pertinent question comes from the perspective of realpolitik.

Which is more damaging to US political institutions, having an illegitimate president or admitting that the election was stolen?

I'd wager an admission of election changing fraud would make it almost impossible to recover any trust in political institutions. What would be the next steps from admitting that the election was fraudulent?

Given the above, I'm not sure it matters. Of course that scenario is still possible, if evidence is produced. The institutional incentives align towards keeping the results as is. Proceeding from there, what can be done to restore trust?

*Disclaimer, please do not misread this as an assertion of evidence existing, not existing or the validity of it.
The Future of Gaming: What You Need to Know
I'm use a catchall-domain for 10 years or so, never got any botspam like that. Only think I got sometimes was spam to info@domain, and this can be easily ignored.

Do those bots really exist? I would think the TLD I use is just not interessting enough for them, but it's from a big country.
While there is a good variety of longer workouts and content, our focus was creating really solid engaging HIIT (high intensity interval training) content. So short and intense programming was key for us. As a result, there are races that are only 30 seconds, games that have 2, 5, and 10 minute options and strength programs that range from 10-20 minutes. Our experience page outlines the workout types and lengths if you'd like to dive in https://www.avironactive.com/experience/
If you don't want me as a user if I can't be bothered to make an account that's fine, honestly.

But, I'm still not going to make an account (and then I guess fill in some data) just to see some examples. Also, while you are right I don't need an email address, it's usually a requirement and I wasn't going to go explore.
also a former rower - I don't think we're the target market. If you've never touched an erg, it might not really matter whether you start on a C2 or not. And I'd guess controlling the hardware also gives them more control over the entire user experience + their own costs.
Money is never in short supply. That's the entire point of fiat currency.
> My policy is ignore them

I can't ignore them indoors because they multiply quickly.

> unless my wife complains (she hates big bugs for some reason)

Some of us are absolutely terrified of bugs and spiders. Some of it is fueled by not knowing the true nature of them and some of it is instinctive. Also traumatic events in the childhood involving bugs play a big role too.
Honda fit?
https://automobiles.honda.com/tools/build-and-price-trims?mo...
"Starting at $16,190"
> I think it's a mistake to think that because you can't read the code, that it is the code that is somehow unreadable, instead of a language you simply haven't learned to read.

This argument is significantly weakened when simply removing the meaningless macros and adding whitespace improves readability.

It's not like it is complicated because it is written in a structurally different language, nor will you actually leverage any benefit from learning this language. It's just obfuscated under the guise of abbreviation.
I think you mean "precision" rather than accuracy. Other than that, I agree with your comment.
The DisplayPort over TB link is very much synchronous/isochronous to the source; it's transported over TB at explicitly scheduled intervals and there are almost no buffers at the source and destination. PCIe would've needed larger buffers at the very least, and would need quite a bit of QoS mangling (there isn't really a bandwidth reservation system on PCIe, so best you could do would be to just give it highest priority)... which also means more places to fail & get wonky.

Also, there's no preexisting standard for framebuffers over PCIe.
Rowing is my favorite form of excercise, so this is an exciting product. I'm always telling myself I'll get a Concept2 when I can afford one (right now I have a cobbled together combination of two discount machines.) Can you compare your product to C2's offering? Exciting to see innovation in the rowing space-it feels pretty monopolized right now.
Fuel for small engine (reciprocating engine) planes does indeed usually still contain lead.

> Unlike motor gasoline, which has been formulated since the 1970s to allow the use of platinum-content catalytic converters for pollution reduction, the most commonly used grades of avgas still contain tetraethyllead (TEL), a toxic substance used to prevent engine knocking (detonation). There are ongoing experiments aimed at eventually reducing or eliminating the use of TEL in aviation gasoline.

https://en.wikipedia.org/wiki/Avgas
Ask HN: Examples of abstractions which are not leaky?
I think the main thing to discuss here is how, 25 yrs later, we're still getting overflow bugs.
I inherited some old Rails code and am updating sites recently. It turns out whoever wrote the code I'm working on was using blog-driven development. Getting a kick out of finding many old blog posts where the code originated from. Google->Ctrl+C->Ctrl-V->Repeat
Interesting. Or if car manufacturers, detecting thin walls on your tires or mileage put on your tires, throttled the top speed of the car to avoid deadly blowouts at highway speeds.

Feature or nuisance? I'm on the fence. Maybe a warning light when you pass some critical speed.
Very likely TSMC would destroy it themselves...scorched earth works.
Thanks! fixed that one too
(Relay tech lead here)

It's in the privacy policy (https://www.mozilla.org/en-US/privacy/firefox-relay/), but yes - the emails are sent thru Amazon SES in plaintext.

We have kicked around the idea of enabling + preserving E2EE emails thru Relay, but ... it's tricky.

https://github.com/mozilla/fx-private-relay/issues/360
Unlikely. The point of writing C in this manner was to bring C closer to APL - or J, which was an evolution of APL at the time. So that J interpreter would be written in a form of J language. J language itself doesn't need to satisfy also C syntax, so J code is somewhat easier.
These days, my experience to use Google search for finding good sources for some high level technical question is very bad in general that can be summarised as going through piles of corporate blog posts with shallow content promoting their products.

I would be happy to use human curated collections of links by topics.
I don't think I _enjoyed_ Tex either, per se, but it definitely left an impression. I'll never look at an Edward Hopper painting the same way again.
it also means "rowing" in french (the intended translation I assume)
I'm in a small company in that position, what's also helped is wrapping UPDATE statements in a transaction with a verification SELECT statement to make sure everything worked ok, then committing the transaction.

Saved my bacon more than once!
Gonna clarify here, because that description is a bit misleading: this wasn't a route that allowed viewing sent emails, it was a route that allowed viewing what would be sent if a password reset was requested.

The story behind that route might be interesting... See, originally Stack Overflow didn't have passwords - all logins were done via OpenID, so any credential management you'd need to do was done through your provider (Google, LiveJournal, myOpenID, etc) This made account recovery assistance pretty simple: given a verified email address, the system would just send that address an email that reminded the owner of any and all OpenID providers that they'd associated with their account. From there, it was up to the account owner to work with a provider to do things like reset passwords.

Skip forward a few years, and Stack Overflow had its own OpenID provider - now you could sign up with an email and password just like a normal site, except really you were creating an account on https://openid.stackexchange.com/ - so the recovery process remained pretty much the same, just with a new provider that happened to be run by the same company.

So far so good... Except, this was awkward to explain to folks. Really, that was what ended up killing OpenID: folks wanted a "Google" or "Facebook" button, not a whitepaper on fancy new authentication systems.

At this point Stack Overflow decided to try to streamline the login process, making signing up and logging in with their own provider seamless: no need to know anything about OpenID. Now recovery emails started including password reset links, and also reduced or removed information on other OpenID providers that were associated with the account in an effort to reduce confusion. The decision tree for generating those emails got complex.

And the decision tree for supporting users got complex as well. Support staff got frustrated; they'd been used to knowing what would and wouldn't be in a recovery email, and had a pile of templates ready to help folks navigate login issues based on that. But now they were getting replies back from folks who were confused and upset because their recovery email didn't contain information that the support person had asserted it would!

This was the genesis of the vulnerable route: a way for support staff to ensure that they were providing accurate information to users about how they could recover their accounts. By the time of this attack, it was already obsolete; the login system had been redesigned twice since the confusing and complex system that first required it. It was vestigial and forgotten... The ideal breeding ground for vulnerabilities.

(source: I worked at Stack Overflow through the time period described in this post, and was involved in support during the period when the relevant route was useful)
For the purpose of the discussion, we could define wealth as anything that can improve the material conditions (and by extension, social) of human beings. Of course, this opens the debate as to which material conditions are desirable, but I'd say the possibility of not needing to work yet having your basic needs met is the main lodestar, the one aspect that would fundamentally change the nature of human life.

In this case, it is clear that some human activity would cause a dramatic fall in our material conditions if not performed. Food and energy producers, raw material extractors and processors, doctors, waste disposers, builders, grocery store clerks and so on... Even if we take into account the wastefulness of our production, it is still the case that they would be sorely missed, and their sudden absence would bring about total collapse. We both consciously and unconsciously recognize this, as evidenced for instance by all the "essential worker" designations that have followed the pandemic in various nations.

Comparatively, if all ad-tech workers, corporate lawyers, high-frequency traders and other such professions disappeared tomorrow we would collectively be hard pressed to notice unless it were pointed out to us. The skimming aspect is much clearer and obvious in their case, even if it's still an inevitably fuzzy boundary that could be argued about indefinitely.

We could also make an argument referring to entropy and there being no free lunch but like solipsism it would be both technically true and useless at the same time.
That's a cool idea! Adding an "advanced search" is something I've been thinking about.

Gives people more control over their personal "algorithm" and what they value most when reading personal blogs.

Hadn't thought about frequency but that could definitely be something you could automate based on RSS. Thanks for the idea!
Already most of our CPU cycles are eaten up by ad-frameworks in our browser.

Now Google want to offload Machine Learning to our browser.
That will be bad for battery life, electricity bills, and the environment.

On the other hand I use free software. So I can make a version of their extension that just claims that I am obsessed with Ironing. That will also make it easier for the Ad-blocker to do its filtering.
> I feel like sometimes this pisses the hardcore rowers off but I’m not a rower, I’m a tech guy. I also think fitness is important and have been working out all of my adult life.

Some other comments have mentioned the Concept 2 and how it's the standard. It sounds like you're actually targeting non-rowers who want a Peloton-like experience. (Sort of like how Peloton doesn't really target the cycling community). Is that how you're thinking about positioning?
Logic is fine for technical folks and a lot of general public, it doesn't work very well in the political arena where waving the bloody shirt is the norm. Logic is a poor weapon in an emotional debate and doesn't work worth a damn.
If the wind is any much changing, you will wobble the aircraft to pieces, and even if you try to, you will still not get enough control authority to land safely in such conditions.

You don't get anywhere near the amount of control authority, and its speed if it depends on rotating the whole body of the aircraft weighting many tons.
You have to just be careful who gets your data.

The less you use social media the happier you'll generally be. No matter what you say the context around it can change and your life destroyed with it.

Breaking out of the social media matrix has been one of my best decisions, I was able to really live in 2019. Made tons of friends as well as a few partners. All of this happened in this place called reality.
Yes, they will do. People are claiming for other people to be fired, disbarred or imprisoned for stupid tweets. Can you imagine the cancel brigade and the big social media companies in charge of this technology and its consequences?
Yes, you absolutely should.
The signals you pick up between 0.5 Hz and 40Hz are mostly likely "population" level signals or put another way the average activity of millions of neurons spread across large swaths of the brain. A good analogy re: trying to decode the brain from EEG would be akin to trying to decode what is going on in a soccer match but only using the noise of the crowds.
Participating in a remote batch at the Recurse Center
I'm not a specialist, but I can link you to the answer: [1]

Key quote: "B.1.1.7 is defined by 23 mutations from the original Wuhan strain, 8 of which are in the spike protein. The 3 mutations hypothesized to have the largest potential biological effect are N501Y, spike deletion 69-70del and P681H."

The B.1.351 (South Africa) variant has N501Y but not the 69-70 deletion. We're still learning, but virologists I follow are concerned that N501Y may be a driver of higher transmission. But it's likely that multiple mutations contribute.

[1]: https://asm.org/Articles/2021/January/B-1-1-7-What-We-Know-A...
No it doesn't.

The user clicks 'log in with google', their browser gets forwarded to whatever.google.com, the (now first party) cookie gets checked, then the user gets forwarded back to your site with the access token as a parameter in the GET request.

No third party cookies needed.
The one huge tragic problem with that plan is that when we surrender our freedoms “temporarily” to the government, they never give them back! Or at least we do not trust they will give them back, based on vast experience (see: Patriot Act), so this plan cannot work.

The naïveté on display here is staggering. "You can vote your way into fascism, but you have to shoot your way out."
> From someone else's perspective, maybe freedom is more important than lives, and they are willing to let some people (including themselves) die in order to avoid temporary or permanent limits on existing freedoms.

> (including themselves)

Including others, which is against any serious code of ethics.

> From your perspective, maybe lives are more important than freedoms and you are willing to limit some freedoms temporarily or permanently if it means saving more lives.

It's extremely difficult for me to imagine a more fallacious argument than this.

The closest I can come is imagining a mass movement against DUI checkpoints by people who refuse to show their license, but who purposely get drunk before speeding through the checkpoint.

It is not only philosophically consistent to protest mask laws while at the same time wearing a mask during this pandemic-- it's ethically required. The fact that you don't seem to realize you've hard-coupled a defense of freedom with wanton irresponsibility is legitimately worrisome. It reeks of the success of online filter bubbles dividing consumers into the most destructive two poles of potential behavior/opinion.

Luckily, in my own community, talking in person to other humans, I don't witness anything like these two poles. Rather, I see a lot of pandemic fatigue, results of shit messaging from the government, some disinformation, and the occasional asshole who must be addicted to a political feed like a degenerate gambler in Vegas.

Honestly, for most people it's not going to matter what side of the political spectrum they were on. Nearly everyone has made at least one critical safety mistake, failing to protect themselves or their loved ones. At least in the U.S., noses peeking out from masks is a bi-partisan issue. High ground is a luxury of social media self-delusion.
I treat my face, name, birthday and numbers as open data.

Maybe companies should stop using these things for verification and start allowing people to use cryptography more efficiently.
Article talks about two different types locks, one is the mutex, which the article admits won’t work when using with multiple instances.

The other is briefly mentioned with a link to Wikipedia and is a optimistic lock that is to be used with your database.

I talked about two use cases for optimistic locking, one applied with a database, that with will work with any number of instances, because the synchronization check lives in the database and not in the instance.

My other case was to use an optimistic lock instead of the mutex example, that will still only work with single instance because the synchronization check is local to the instance.
(Edit: wrong, it could actually work there too, if saveBalance() was changed)

Optimistic locking is quite simple to implement, just check that the value has not changed before writing, if it has you have to reread the value again.